wireshark: Stack-based buffer over-read from tvbuff buffer when reading snoop capture files

The snoopread function in wiretap/snoop.c in Wireshark 1.2.x before 1.2.17 and 1.4.x before 1.4.7 does not properly handle certain virtualizable buffers, which allows remote attackers to cause a denial of service application crash via a large length value in a snoop file that triggers a stack-bas...

PT-2011-3501

Name of the Vulnerable Software and Affected Versions Wireshark versions 1.2.x through 1.2.16 Wireshark versions 1.4.x through 1.4.6 Description The issue is related to the snoop read function in wiretap/snoop.c, which does not properly handle certain virtualizable buffers. This allows remote...